Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Rich Megginson
. To: Rich Megginson Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Megginson wrote: On 09/25/2012 03:34 PM, Steven Jones wrote: Hi, I have set the filter size as 2 for the user and it makes no difference. Where did you set

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-27 Thread Steven Jones
[steven.jo...@vuw.ac.nz] Sent: Thursday, 27 September 2012 3:57 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, Unable to get this to work on win2k3r2 even with enterprise admin permissions. What I have found is this which Im about to try, 1. Use

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-26 Thread Natxo Asenjo
On Wed, Sep 26, 2012 at 5:46 AM, Rob Crittenden rcrit...@redhat.com wrote: Steven Jones wrote: Hi, I dont have a ldapmodify command for changing something in AD. I have increased the only scope I/we know about which is the return of objects from a search inside the AD gui but that might

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-26 Thread Steven Jones
: Natxo Asenjo [natxo.ase...@gmail.com] Sent: Thursday, 27 September 2012 2:04 a.m. To: Rob Crittenden Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On Wed, Sep 26, 2012 at 5:46 AM, Rob Crittenden rcrit...@redhat.com wrote: Steven Jones wrote

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rich Megginson
[freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Tuesday, 25 September 2012 3:17 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, I am trying to run this and getting search exceeded. ldapsearch -xLLL

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Steven Jones
...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] Sent: Tuesday, 25 September 2012 3:17 p.m. Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, I am trying to run this and getting search exceeded

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rich Megginson
: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/24/2012 11:49 PM, Steven Jones wrote: Hi, Im confused here, has no one tried to winsync 2000+ users before? Are there any docs on working around this limit? Ive up'd the user to 2 but that seems to have had no effectmy AD ppl

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rob Crittenden
Rich Megginson wrote: On 09/25/2012 03:34 PM, Steven Jones wrote: Hi, I have set the filter size as 2 for the user and it makes no difference. Where did you set this? In IPA? In AD? If so, where? How? What does filter size mean? To me, it means the size of an LDAP search filter in an

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Steven Jones
@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Megginson wrote: On 09/25/2012 03:34 PM, Steven Jones wrote: Hi, I have set the filter size as 2 for the user and it makes no difference. Where did you set this? In IPA? In AD? If so, where? How? What does filter

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-25 Thread Rob Crittenden
463 6272 From: Rob Crittenden [rcrit...@redhat.com] Sent: Wednesday, 26 September 2012 1:31 p.m. To: Rich Megginson Cc: Steven Jones; freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Rich Megginson wrote: On 09/25

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-24 Thread Steven Jones
...@redhat.com] Sent: Saturday, 22 September 2012 3:46 a.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/21/2012 09:18 AM, Dmitri Pal wrote: On 09/21/2012 11:07 AM, Rich Megginson wrote: On 09/21/2012 09:04 AM, Dmitri Pal wrote: On 09

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-24 Thread Steven Jones
-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users Hi, I am trying to run this and getting search exceeded. ldapsearch -xLLL -D winsync_binddn -w passwd -h AD_host -s sub -b OU=VUW_Staff,DC=staff,DC=vuw,DC=ac,DC=nz cn=* dn ad.dns.txt Looks like I have 5900 AD users

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-23 Thread Steven Jones
] on behalf of Rich Megginson [rmegg...@redhat.com] Sent: Saturday, 22 September 2012 3:46 a.m. To: d...@redhat.com Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/21/2012 09:18 AM, Dmitri Pal wrote: On 09/21/2012 11:07 AM, Rich Megginson wrote: On 09

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
--- *From:* Rich Megginson [rmegg...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
--- *From:* Rich Megginson [rmegg...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Dmitri Pal
. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported users, but there are 5700 of them but I only have 2000 which corresponds to the view that AD gives you by default

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-21 Thread Rich Megginson
...@redhat.com] *Sent:* Friday, 21 September 2012 11:38 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported users, but there are 5700 of them but I only have 2000 which

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
I have hundreds of disable users in IPA now transferred from AD, is there a quick/clean way to purge them from IPA? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272 ___ Freeipa-users

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Rich Megginson
-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] *Sent:* Thursday, 20 September 2012 2:48 p.m. *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users it isnt, Im doing a OU=VUW_Staff instead

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Dmitri Pal
-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] *Sent:* Thursday, 20 September 2012 2:48 p.m. *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users it isnt, Im doing a OU=VUW_Staff instead

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
Subject: Re: [Freeipa-users] winsync agreement wipes IPA users I have hundreds of disable users in IPA now transferred from AD, is there a quick/clean way to purge them from IPA? regards Steven Jones Technical Specialist - Linux RHCE Victoria University, Wellington, NZ 0064 4 463 6272

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
6272 From: freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Dmitri Pal [d...@redhat.com] Sent: Friday, 21 September 2012 8:56 a.m. To: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Friday, 21 September 2012 8:53 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 02:43 PM

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Rich Megginson
*From:* freeipa-users-boun...@redhat.com [freeipa-users-boun...@redhat.com] on behalf of Steven Jones [steven.jo...@vuw.ac.nz] *Sent:* Friday, 21 September 2012 8:44 a.m. *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users I have hundreds of disable

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-20 Thread Steven Jones
: Friday, 21 September 2012 11:38 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/20/2012 03:52 PM, Steven Jones wrote: Hi, I have imported users, but there are 5700 of them but I only have 2000 which corresponds to the view

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Rich Megginson
@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 06:17 PM, Steven Jones wrote: Hi, The first time missed the --win-subtree settings so I wiped the admins in the IPA admin group and users as they were not in cn=users as per the bug. The second time as far as I

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
From: Rich Megginson [rmegg...@redhat.com] Sent: Thursday, 20 September 2012 11:03 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/19/2012 04:55 PM, Steven Jones wrote: Hi, Sample of errors log

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-19 Thread Steven Jones
: Thursday, 20 September 2012 11:03 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/19/2012 04:55 PM, Steven Jones wrote: Hi, Sample of errors log, = [17/Sep/2012:13:31:48 +1200] NSMMReplicationPlugin - changelog

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-18 Thread Rich Megginson
2012 11:37 a.m. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Rich Megginson
On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as my users are not in the users folder but the VUW_Staff folder (at the same level) and it wiped all IPA users that are

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Steven Jones
2012 11:37 a.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Rich Megginson
. *To:* Steven Jones *Cc:* freeipa-users@redhat.com *Subject:* Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 04:17 PM, Steven Jones wrote: Hi, I just tried to do a winsync agreement with specifying the AD point as cn=VUW_Staff,dc=staff,dc=vuw,dc=vuw,dc=ac,dc=nz as my users

Re: [Freeipa-users] winsync agreement wipes IPA users

2012-09-17 Thread Steven Jones
Victoria University, Wellington, NZ 0064 4 463 6272 From: Rich Megginson [rmegg...@redhat.com] Sent: Tuesday, 18 September 2012 12:47 p.m. To: Steven Jones Cc: freeipa-users@redhat.com Subject: Re: [Freeipa-users] winsync agreement wipes IPA users On 09/17/2012 06:17 PM